Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0046ff5a by Salvatore Bonaccorso at 2026-08-22T22:12:02+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -124,21 +124,21 @@ CVE-2026-5093 (The GreenShift \u2013 Animation and Page
Builder Blocks plugin fo
CVE-2026-59809 (SiYuan before v3.8.0 interpolates secret placeholders into the
destina ...)
NOT-FOR-US: SiYuan
CVE-2026-59808 (AVideo through commit 9c39d8c8 contains an authentication
bypass vulne ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-59256 (WWBN AVideo through commit 9c39d8c8 contains an authorization
bypass v ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-58003 (WWBN AVideo through commit 9c39d8c8 contains a cross-site
request forg ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-58002 (WWBN AVideo through commit
9c39d8c8b4c1f75540788d6b391740852ceb0732 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-58001 (WWBN AVideo through commit 9c39d8c8 contains a cross-site
request forg ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-57998 (better-npm-audit through 3.11.0, and the 4.0.0-rc.2
prerelease, builds ...)
- TODO: check
+ NOT-FOR-US: better-npm-audit
CVE-2026-57944 (AVideo through commit 9c39d8c8 contains a cross-site request
forgery v ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-56380 (AVideo through commit 9c39d8c8 contains an information
exposure vulner ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-4703 (The WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin
for Wo ...)
NOT-FOR-US: WordPress plugin
CVE-2026-4561 (The MC4WP: Mailchimp for WordPress plugin for WordPress is
vulnerable ...)
@@ -154,7 +154,7 @@ CVE-2026-3424 (The The kk Star Ratings \u2013 Rate Post &
Collect User Feedbacks
CVE-2026-2996 (The Advanced Product Fields (Product Addons) for WooCommerce
plugin fo ...)
NOT-FOR-US: WordPress plugin
CVE-2026-12710 (A Missing Authorization vulnerability in the QueryEngineTask
of Google ...)
- TODO: check
+ NOT-FOR-US: Google Cloud
CVE-2026-11948
REJECTED
CVE-2026-11947
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0046ff5a03ad531a81bf24264c9d2e7bedb0c86d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0046ff5a03ad531a81bf24264c9d2e7bedb0c86d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
